Differentiate empty-line from EOF in stdin for -be

[exim.git] / doc / doc-txt / NewStuff

diff --git a/doc/doc-txt/NewStuff b/doc/doc-txt/NewStuff
index 253eae2b76a6ec89067810bf73fd14952ded1a98..77009ec33993e639705f42a32984fed7effcf74e 100644 (file)
--- a/doc/doc-txt/NewStuff
+++ b/doc/doc-txt/NewStuff
@@ -6,6 +6,18 @@ Before a formal release, there may be quite a lot of detail so that people can
 test from the snapshots or the Git before the documentation is updated. Once
 the documentation is updated, this file is reduced to a short list.
 
 test from the snapshots or the Git before the documentation is updated. Once
 the documentation is updated, this file is reduced to a short list.
 

+Version 4.96
+------------
+
+ 1. A new ACL condition: seen. Records/tests a timestamp against a key.
+
+ 2. A variant of the "mask" expansion operator to give normalised IPv6.
+
+ 3. UTC output option for exim_dumpdb, exim_fixdb.
+
+ 4. An event for failing TLS connects to the daemon.
+
+

 Version 4.95
 ------------
 
 Version 4.95
 ------------
 


@@ -21,6 +33,48 @@ Version 4.95
  4. Single-key LMDB lookups, previously experimental, are now supported.
     The support is not built unless specified in the Local/Makefile.
 
  4. Single-key LMDB lookups, previously experimental, are now supported.
     The support is not built unless specified in the Local/Makefile.
 

+ 5. Option "message_linelength_limit" on the smtp transport to enforce (by
+    default) the RFC 998 character limit.
+
+ 6. An option to ignore the cache on a lookup.
+
+ 7. Quota checking during reception (i.e. at SMTP time) for appendfile-
+    transport-managed quotas.
+
+ 8. Sqlite lookups accept a "file=<path>" option to specify a per-operation
+    db file, replacing the previous prefix to the SQL string (which had
+    issues when the SQL used tainted values).
+
+ 9. Lsearch lookups accept a "ret=full" option, to return both the portion
+    of the line matching the key, and the remainder.
+
+10. A command-line option to have a daemon not create a notifier socket.
+
+11. Faster TLS startup.  When various configuration options contain no
+    expandable elements, the information can be preloaded and cached rather
+    than the previous behaviour of always loading at startup time for every
+    connection.  This helps particularly for the CA bundle.
+
+12. Proxy Protocol Timeout is configurable via "proxy_protocol_timeout"
+    main config option.
+
+13. Option "smtp_accept_max_per_connection" is now expanded.
+
+14. Log selector "queue_time_exclusive", enabled by default, to exclude the
+    time taken for reception from QT log elements.
+
+15. Main option "smtp_backlog_monitor", to set a level above which listen
+    socket backlogs are logged.
+
+16. Main option "hosts_require_helo", requiring HELO or EHLO before MAIL.
+
+17. A main config option "allow_insecure_tainted_data" allows to turn
+
+18. TLS ALPN handling.  By default, refuse TLS connections that try to specify
+    a non-smtp (eg. http) use.  Options for customising.
+
+19. Support for MacOS (darwin) has been dropped.
+

 
 Version 4.94
 ------------
 
 Version 4.94
 ------------


@@ -33,7 +87,7 @@ Version 4.94
 
  3. A msg:defer event.
 
 
  3. A msg:defer event.
 

- 4. Client-side support in the gsasl authenticator.  Tested against the 
+ 4. Client-side support in the gsasl authenticator.  Tested against the

     plaintext driver for PLAIN; only against itself for SCRAM-SHA-1 and
     SCRAM-SHA-1-PLUS methods.
 
     plaintext driver for PLAIN; only against itself for SCRAM-SHA-1 and
     SCRAM-SHA-1-PLUS methods.
 


@@ -46,7 +100,7 @@ Version 4.94
  7. Named-list definitions can now be prefixed "hide" so that "-bP" commands do
     not output the content.  Previously this could only be done on options.
 
  7. Named-list definitions can now be prefixed "hide" so that "-bP" commands do
     not output the content.  Previously this could only be done on options.
 

- 8. As an exerimental feature, the dovecot authenticatino driver supports inet
+ 8. As an experimental feature, the dovecot authentication driver supports inet

     sockets.  Previously it was unix-domain sockets only.
 
  9. The ACL control "queue_only" can also be spelled "queue", and now takes an
     sockets.  Previously it was unix-domain sockets only.
 
  9. The ACL control "queue_only" can also be spelled "queue", and now takes an


@@ -73,7 +127,7 @@ Version 4.94
 16. An option on all single-key lookups, to return (on a hit) a de-tainted
     version of the lookup key rather than the looked-up data.
 
 16. An option on all single-key lookups, to return (on a hit) a de-tainted
     version of the lookup key rather than the looked-up data.
 

-17. $domain_data and $localpart_data are now set by all list-match successes.
+17. $domain_data and $local_part_data are now set by all list-match successes.

     Previously only list items that performed lookups did so.
     Also, matching list items that are tail-match or RE-match now set the
     numeric variables $0 (etc) in the same way os other RE matches.
     Previously only list items that performed lookups did so.
     Also, matching list items that are tail-match or RE-match now set the
     numeric variables $0 (etc) in the same way os other RE matches.


@@ -87,6 +141,9 @@ Version 4.94
 
 21. bounce_message_file and warn_message_file are now expanded before use.
 
 
 21. bounce_message_file and warn_message_file are now expanded before use.
 

+22. New main config option spf_smtp_comment_template to customise the
+    $spf_smtp_comment variable
+

 
 
 Version 4.93
 
 
 Version 4.93


@@ -127,7 +184,7 @@ Version 4.93
 15: Support under OpenSSL for writing NSS-style key files for packet-capture
     decode.  The environment variable SSLKEYLOGFILE is used; if an absolute path
     it must indicate a file under the spool directory; if relative the the spool
 15: Support under OpenSSL for writing NSS-style key files for packet-capture
     decode.  The environment variable SSLKEYLOGFILE is used; if an absolute path
     it must indicate a file under the spool directory; if relative the the spool

-    directory is prepended.  Works on the server side only.  Support under 
+    directory is prepended.  Works on the server side only.  Support under

     GnuTLS was already there, being done purely by the library (server side
     only, and exim must be run as root).
 
     GnuTLS was already there, being done purely by the library (server side
     only, and exim must be run as root).